$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json) Hash identifier: QtMJBJTLB/MtgPJ5OnRCpzEKzAVFuQg0PogLJJEIbHk= Subject key identifier: 21:F9:2B:68:0E:06:34:B8:76:8E:CB:48:E5:A3:7C:3E:0B:2B:9C:7E Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft Manifest number: 38 Signing time: Sun 01 Jun 2025 07:19:47 +0000 Manifest this update: Sun 01 Jun 2025 07:19:47 +0000 Manifest next update: Sun 08 Jun 2025 07:19:47 +0000 Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: za0Ek1Pyu0Yi70KO3vIv0gzn05OD2WuKtk4c8wR8FFk=) 2: CC37DC24024311F0B8CC3D64C4F9AE02.roa (hash: p8FHrwqthntaiCGXD1qfLj6KRbEBkZSs0aBfuIq0c5c=) 3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: d1zImNClufU6mQa0qsoJOx/6gPAzww6pSPXhwifVLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Validity Not Before: Jun 1 07:19:47 2025 GMT Not After : Jun 8 07:19:47 2025 GMT Subject: CN=683bff13-707a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7d:2a:2f:b8:d2:23:d0:da:00:12:77:1c:a8: b6:c5:87:5e:6b:e6:77:49:f7:43:b7:8d:53:76:ff: 6b:0a:9a:cb:df:72:ec:ee:1f:5a:b2:12:00:ed:96: ba:53:80:24:1e:59:71:f7:f5:13:4e:8f:13:c0:b7: 89:3f:a2:35:94:71:89:61:06:46:e8:6a:68:6e:6b: 93:8e:58:80:b8:5f:38:dd:d7:25:bb:3a:4d:cb:27: 37:2d:30:56:3d:1d:75:26:47:1d:af:c3:6f:7d:42: b7:9b:78:ab:61:15:92:38:b2:5d:7d:d0:6f:af:77: 4b:de:28:59:d4:d5:30:d2:17:e6:b6:d6:d7:af:59: e5:a4:83:8f:8b:f0:77:32:df:d6:64:8d:7b:bc:ec: 90:d7:03:2b:c4:b4:60:a4:d8:55:7e:50:0e:dd:03: ef:87:b8:89:b7:70:e9:89:5c:dc:68:5e:59:87:38: 33:78:60:63:92:08:68:0b:b1:58:cf:1b:83:ac:71: ed:c6:7c:99:cb:a7:f8:2d:e9:14:2b:2a:61:dc:c0: 84:6b:b1:c8:46:0d:e4:6e:0a:ce:f9:3a:0e:f3:f4: 16:f8:1d:85:63:ba:e7:7f:83:6d:94:25:9f:3a:36: 80:14:8d:16:f0:8b:33:9d:79:f5:f0:f2:99:61:f3: 75:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F9:2B:68:0E:06:34:B8:76:8E:CB:48:E5:A3:7C:3E:0B:2B:9C:7E X509v3 Authority Key Identifier: keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9c:66:76:b5:c7:5d:be:eb:7a:ee:df:3a:43:d3:0a:c7:40: 31:cc:d0:b4:32:d6:91:a5:91:e9:1b:e5:79:de:7f:b3:2a:e5: 9a:7c:8c:15:6c:3f:cb:8c:81:47:22:3e:de:ef:1c:2f:c7:f7: 3a:f7:71:38:c9:5c:ce:82:de:f6:5b:2e:56:2a:5d:7b:cd:cc: 44:fb:02:73:7b:14:0a:a9:aa:a2:85:d5:7d:55:a1:dc:62:1a: f2:36:cd:a5:59:56:7f:8b:71:5e:f0:f0:cb:95:7d:a6:49:ea: 71:6b:61:a9:d4:09:5a:fa:bc:b6:da:f0:09:93:0c:f7:57:00: b5:ab:7a:a4:16:84:d1:04:04:bf:51:14:52:c3:05:03:56:a1: ff:e0:49:77:f2:07:50:e3:45:8d:2c:df:43:c2:a1:56:cc:21: 92:e4:c4:07:e8:ee:cb:c8:4b:a9:3b:a6:32:95:87:cb:44:25: 11:77:09:13:14:6b:30:5d:dd:79:b9:29:61:c1:c3:d6:2e:e8: ba:d6:17:91:4e:18:3b:9e:98:57:51:2f:42:1c:0c:34:67:dd: 2e:eb:98:d8:bf:cb:c0:74:cb:f0:47:cf:cd:29:99:6a:08:7a: f4:31:55:ea:05:91:96:81:d0:f7:ca:50:f8:bf:e6:a1:9b:c7: 76:8e:eb:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjFDQzExMC8GA1UEBRMoNDQ2RkFGOTIzQkVCQUY5NjM1NzI4N0ZFMjUwOTkxQzc1 NDkxNDU0RDAeFw0yNTA2MDEwNzE5NDdaFw0yNTA2MDgwNzE5NDdaMBgxFjAUBgNV BAMTDTY4M2JmZjEzLTcwN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNfSovuNIj0NoAEnccqLbFh15r5ndJ90O3jVN2/2sKmsvfcuzuH1qyEgDtlrpT gCQeWXH39RNOjxPAt4k/ojWUcYlhBkboamhua5OOWIC4Xzjd1yW7Ok3LJzctMFY9 HXUmRx2vw299QrebeKthFZI4sl190G+vd0veKFnU1TDSF+a21tevWeWkg4+L8Hcy 39ZkjXu87JDXAyvEtGCk2FV+UA7dA++HuIm3cOmJXNxoXlmHODN4YGOSCGgLsVjP G4Osce3GfJnLp/gt6RQrKmHcwIRrschGDeRuCs75Og7z9Bb4HYVjuud/g22UJZ86 NoAUjRbwizOdefXw8plh83WLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIfkraA4G NLh2jstI5aN8PgsrnH4wHwYDVR0jBBgwFoAURG+vkjvrr5Y1cof+JQmRx1SRRU0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMUNDLzNBRkMzM0UyRUY2 MzExRUZCRjY0QUI2QUM0RjlBRTAyL1JHLXZranZycjVZMWNvZi1KUW1SeDFTUlJV MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkctdmtqdnJyNVkxY29mLUpRbVJ4MVNSUlUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MUNDLzNBRkMzM0UyRUY2MzExRUZCRjY0QUI2QUM0RjlBRTAyL1JHLXZranZycjVZ MWNvZi1KUW1SeDFTUlJVMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ2cZna1x12+63ru3zpD0wrHQDHM0LQy1pGlkekb5Xnef7Mq5Zp8jBVs P8uMgUciPt7vHC/H9zr3cTjJXM6C3vZbLlYqXXvNzET7AnN7FAqpqqKF1X1Vodxi GvI2zaVZVn+LcV7w8MuVfaZJ6nFrYanUCVr6vLba8AmTDPdXALWreqQWhNEEBL9R FFLDBQNWof/gSXfyB1DjRY0s30PCoVbMIZLkxAfo7svIS6k7pjKVh8tEJRF3CRMU azBd3Xm5KWHBw9Yu6LrWF5FOGDuemFdRL0IcDDRn3S7rmNi/y8B0y/BHz80pmWoI evQxVeoFkZaB0PfKUPi/5qGbx3aO6+E= -----END CERTIFICATE-----Generated at Mon Jun 2 21:47:39 2025 by rpki-client